Skip to content

[Script] PHPBookmark - work in progress

cherubcherub SERnuke.com
edited September 2014 in New Engines/Platforms
I thought I'd have a play around with the ini files to try and get my head round the syntax and have come up with the following, targetting the PHPBookmark platform:

http://pastebin.com/ZQR0p3xw

I think its nearly there, but there are a few points that I'm not sure of.
1) how the captcha is extracted, looks like some sort of regex but Im not sure - checkcode=%captcha% src="data:;"
2) how the resulting password is extracted from the email
3) the whole verification system, I just commented it out

I will be looking at it again when Ive got time, but if anyone else wants to take a look feel free. There are plenty of targets out there, and it seems a pretty simple platform.

Cheers

Comments

  • SvenSven www.GSA-Online.de
    edited August 2012

    Nice to see people contribute here.

    > 1) how the captcha is extracted, looks like some sort of regex but Im not sure

    Just write %captcha% and the program will find it automatically. Just in case this is not working, use some kind of string that is part of the captcha-url like... %captcha% /captcha.php

    > 2) how the resulting password is extracted from the email

    in setup you have it setup like this...

    [SETUP]

    extract from email=password=email_pw

    this will go to the email_pw section, extract things from emails according to its section and put the result in "password"

    [email_pw]

    type=extract

    front=password:

    back1=\n

    back2=<

    this takes a text (email) searches for "password:", cuts that away, and cuts things away at the end (new line and if present als all after the < sign).

    >3) the whole verification system, I just commented it out

    that really depends on the way a link can be detected. To complicated to write it up here. 

  • cherubcherub SERnuke.com
    Thanks, will have a play around
  • SvenSven www.GSA-Online.de
    This was also included in v4.03. Thanks to all who made it possible.
  • cherubcherub SERnuke.com
    Working on a few more, but no timeframes ;)
  • SvenSven www.GSA-Online.de

    cool

    let me know if you run into problems :)

Sign In or Register to comment.